IN THE CLAIMS : 

Please AMEND claims 13-17, as shown below. 
1. (Previously Presented) A method, comprising: 

receiving at a broker a usage policy for constraints related to data of a user in a 
communication system, wherein said usage policy defines at least one strictness level 
parameter value for at least one attribute in the usage policy; 

receiving a request for data associated with the user from a service provider in the 
communication system to the broker, wherein the service provider possesses a privacy 
policy and wherein said request comprises at least one strictness level parameter value for 
at least one attribute in the privacy policy; 

checking, in the broker, the request against a usage policy of the user by 
comparing strictness level parameter values associated with attributes in the usage policy 
to corresponding strictness level parameter values associated with corresponding 
attributes in the privacy policy; and 

sending a response to the service provider indicating whether the data can be 
released, based on the comparison of the strictness level parameter values associated with 
attributes in the usage policy to corresponding strictness level parameter values 
associated with corresponding attributes the privacy policy. 
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2. (Previously Presented) The method of claim 1, wherein the usage policy is 
defined by the user. 

3. (Previously Presented) The method of claim 1, further comprising: 
providing the broker with a predefined set of privacy policies and usage policies. 

4. (Previously Presented) The method of claim 3, wherein the providing 
comprises providing the privacy policies and the usage policies comprising similar 
attributes with defined strictness level parameter values. 

5-6 (Cancelled) 

7. (Previously Presented) The method of claim 1, further comprising: 
releasing user data when each of said at least one strictness level parameter value 

for the at least one attribute of the privacy policy is less than or equal to the 
corresponding defined strictness level parameter value of the corresponding attribute in 
the received usage policy. 

8. (Previously Presented) The method of claim 1, further comprising: 
indicating, in the response by the broker, a strictness level parameter value of an 

attribute of the usage policy to the service provider when the corresponding strictness 
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level parameter value of the corresponding attribute of the privacy policy of the service 
provider is greater than the indicated strictness level parameter value of the attribute in 
the usage policy. 

9. (Previously Presented) The method of claim 1, further comprising: 
allowing the user to reduce a strictness level parameter value of an attribute in the 

usage policy when the corresponding strictness level parameter value of the 
corresponding attribute of the privacy policy of the service provider is greater than the 
strictness level parameter value of the attribute in the usage policy to be reduced. 

10. (Previously Presented) The method of claim 1, further comprising: 
attaching an electronically signed usage policy to the data when the data is 

released. 

11. (Previously Presented) A system, comprising: 
a service provider possessing a privacy policy; and 

a broker hosting a usage policy for constraints related to data of a user, wherein 
said usage policy defines at least one strictness level parameter value for at least one 
attribute in the usage policy, wherein the broker is configured to check a request from the 
service provider against the usage policy of the user by comparing strictness level 
parameter values associated with attributes in the usage policy to corresponding strictness 
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level parameter values associated with corresponding attributes in the privacy policy, 
wherein said request comprises at least one strictness level parameter value for at least 
one attribute in the privacy policy, and the broker is configured to send a response to the 
service provider indicating whether data associated with the user can be released in 
response to the request based on the comparison of the strictness level parameter values 
associated with attributes in the usage policy to corresponding strictness level parameter 
values associated with corresponding attributes the privacy policy. 

12. (Previously Presented) A system, comprising: 

introducing means for introducing to a broker a usage policy for constraints related 
to data of a user, wherein said usage policy defines at least one strictness level parameter 
value for at least one attribute in the usage policy; 

receiving means for receiving a request for data associated with the user from a 
service provider to the broker, wherein the service provider possesses a privacy policy 
and wherein said request comprises at least one strictness level parameter value for at 
least one attribute in the privacy policy; 

checking means for checking, in the broker, the request against a usage policy of 
the user by comparing strictness level parameter values associated with attributes in the 
usage policy to corresponding strictness level parameter values associated with 
corresponding attributes in the privacy policy; and 
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sending means for sending a response to the service provider indicating whether 
the data can be released, based on the comparison of the strictness level parameter values 
associated with attributes in the usage policy to corresponding strictness level parameter 
values associated with corresponding attributes the privacy policy. 

1 3 . (Currently Amended) An apparatus, comprising: 
at least one memory including computer code, 
at least one processor. 

wherein the at least one memory and the computer program code are configured 
to. with the at least one processor, cause the apparatus at least to 

a r e ceiver configured to r eceive a request for data associated with a user from a 
service provider, wherein the service provider possesses a privacy policy and wherein 
said request comprises at least one strictness level parameter value for at least one 
attribute in the privacy policy; and 

Q processor configured to check the request against a usage policy of the user by 
comparing strictness level parameter values associated with attributes in the usage policy 
to corresponding strictness level parameter values associated with corresponding 
attributes in the privacy policy, wherein said usage policy defines at least one strictness 
level parameter value for at least one attribute in the usage policy; and 

te-send a response to the service provider indicating whether the data can be 
released, based on the comparison of the strictness level parameter values associated with 
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attributes in the usage policy to corresponding strictness level parameter values 
associated with corresponding attributes the privacy policy. 

14. (Currently Amended). The apparatus of claim 13, wherein the at least one 
memory and the computer program code are fiirther configured to. with the at least one 
processor, cause the apparatus at least to t he procossor Ig further conFigurod to: release 
user data when each of said at least one strictness level parameter value for the at least 
one attribute privacy policy is less than or equal to the corresponding defined strictness 
level parameter value of the corresponding attribute in the received usage policy. 

15. (Currently Amended) The apparatus of claim 13, wherein the at least one 
memory and the computer program code are further configured to. with the at least one 
processor, cause the apparatus at least to t he processor is further configurod to: indicate, 
in the response, a strictness level parameter value of an attribute of the usage policy to the 
service provider when the corresponding strictness level parameter value of the 
corresponding attribute of the privacy policy of the service provider is greater than the 
indicated strictness level parameter value of the attribute in the usage policy. 

16. (Currently Amended) The apparatus of claim 13, wherein the at least one 
memory and the computer program code are further configured to, with the at least one 
processor, cause the apparatus at least to t he procossor ir. fiirthor configurod tn: allow the 
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user to reduce a strictness level parameter value of an attribute in the usage policy when 
the corresponding strictness level parameter value of the corresponding attribute of the 
privacy policy of the service provider is greater than the strictness level parameter value 
of the attribute in the usage policy to be reduced. 

17. (Currently Amended) The apparatus of claim 13, wherein the at least one 
memory and the computer program code are further configured to. with the at least one 
processor, cause the apparatus at least to tho procossor is further configurod to: attach an 
electronically signed usage policy to the data when the data is released. 

18. (Previously Presented) An apparatus, comprising: 

receiving means for receiving a request for data associated with a user from a 
service provider, wherein the service provider possesses a privacy policy and wherein 
said request comprises at least one strictness level parameter value for at least one 
attribute in the privacy policy; 

checking means for checking the request against a usage policy of the user by 
comparing strictness level parameter values associated with attributes in the usage policy 
to corresponding strictness level parameter values associated with corresponding 
attributes in the privacy policy, wherein said usage policy defines at least one strictness 
level parameter value for at least one attribute in the usage policy; and 
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sending means for sending a response to the service provider indicating whether 
the data can be released, based on the comparison of the strictness level parameter values 
associated with attributes in the usage policy to corresponding strictness level parameter 
values associated with corresponding attributes the privacy pohcy. 

19: (Previously Presented) A computer-readable medium comprising computer- 
executable components, the components configured to: 

receive a usage policy for constraints related to data of a user in a communication 
system, wherein said usage policy defines at least one strictness level parameter value for 
at least one attribute in the usage policy; 

receive a request for data associated with the user fi-om a service provider in the 
communication system, wherein the service provider possesses a privacy policy and 
wherein said request comprises at least one strictness level parameter value for at least 
one attribute in the privacy policy; 

check the request against a usage policy of the user by comparing strictness level 
parameter values associated with attributes in the usage policy to corresponding strictness 
level parameter values associated with corresponding attributes in the privacy policy; and 

send a response to the service provider indicating whether the data can be released, 
based on the comparison of the strictness level parameter values associated with 
attributes in the usage policy to corresponding strictness level parameter values 
associated with corresponding attributes the privacy policy. 
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20. (Previously Presented) The medium of claim 19, wherein the usage policy is 
defined by the user. 

21. (Previously Presented) The medium of claim 19, wherein the components are 
configured to: 

receive a predefined set of privacy policies and usage policies. 

22. (Previously Presented) The medium of claim 21, wherein receiving the 
predefined set comprises receiving the privacy policies and the usage policies comprising 
similar attributes with defined strictness level parameter values. 

23-24 (Cancelled) 

25. (Previously Presented) The medium of claim 19, wherein the components are 
configured to: 

release user data when each of said at least one strictness level parameter value for 
the at least one attribute of the privacy policy is less than or equal to the corresponding 
defined strictness level parameter value of the corresponding attribute in the received 
usage policy. 



-10- 



Application No.: 10/648,644 



26. (Previously Presented) The medium of claim 19, wherein the components are 
configured to: 

indicate, in the response, a strictness level parameter value of an attribute of the 
usage policy to the service provider when the corresponding strictness level parameter 
value of the corresponding attribute of the privacy policy of the service provider is 
greater than the indicated strictness level parameter value of the attribute in the usage 
policy. 

27. (Previously Presented) The medium of claim 19, wherein the components are 
configured to: 

allow the user to reduce a strictness level parameter value of an attribute in the 
usage policy when the corresponding strictness level parameter value of the 
corresponding attribute of the privacy policy of the service provider is greater than the 
strictness level parameter value of the attribute in the usage policy to be reduced. 

28. (Previously Presented) The medium of claim 19, wherein the components are 
configured to: 

attach an electronically signed usage policy to the data when the data is released. 
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